$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft File: V9tCq56777_iEHP1AH_Ddixfuwg.mft (raw, json) Hash identifier: 5MuSwwzXjp4/CvM9zXBazG59IlWtOdfgoPBQtBE5lPs= Subject key identifier: 57:D1:65:34:2A:D8:4E:CE:CA:0D:BF:1B:E9:D7:8E:1E:EB:D5:05:1F Authority key identifier: 57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08 Certificate issuer: /CN=A91CA297/serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08 Certificate serial: 08D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft Manifest number: 08D1 Signing time: Thu 18 Sep 2025 20:40:15 +0000 Manifest this update: Thu 18 Sep 2025 20:40:14 +0000 Manifest next update: Thu 25 Sep 2025 20:40:14 +0000 Files and hashes: 1: V9tCq56777_iEHP1AH_Ddixfuwg.crl (hash: VCXHlp8YQiO7H0OmcZhO1hk0n1E3LKsM4cxyuM5QtN8=) 2: 19EF4D1ABE5A11EDAA537748C4F9AE02.roa (hash: miZMhJRep9ETR17YW7gWoj6LqwgVkbNzRlMxX+ZmBhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2264 (0x8d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA297, serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08 Validity Not Before: Sep 18 20:40:14 2025 GMT Not After : Sep 25 20:40:14 2025 GMT Subject: CN=68cc6e2f-5882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:98:dc:2f:82:cb:06:e8:98:e1:4d:03:54:6b: be:93:d9:5a:f8:45:9a:26:e6:de:25:5e:da:f1:6b: 84:09:6e:da:21:56:01:e2:16:5c:b2:65:55:f4:31: 61:b5:27:94:6f:0b:12:8e:79:5c:31:48:f3:50:05: 1b:e4:7e:f2:c6:f3:c8:3a:73:0d:54:b6:7c:5d:99: a4:00:27:78:5b:ae:bd:ac:03:27:6e:e9:66:40:66: 7c:24:91:da:e3:7b:ba:35:49:90:54:b2:0e:36:bf: f5:cc:ec:77:7f:ad:07:d1:75:21:7a:6f:b2:43:37: 96:a0:de:1a:8b:c4:99:d2:f0:45:4c:ff:43:9d:1c: 42:d5:af:80:60:39:a5:3b:ea:4c:f1:4b:fd:68:a1: 07:ff:00:f7:5d:2b:c3:db:c9:84:a8:8a:bd:15:8f: 03:13:d4:83:84:37:aa:1d:80:74:da:7b:7e:d3:59: 54:fb:64:ba:a4:5f:35:2a:f6:6a:ce:47:78:eb:57: d5:c7:b3:0a:85:c2:ed:0a:7e:52:20:15:67:e6:0c: 2d:ef:0b:ce:c6:42:16:73:c1:a6:c3:ca:47:6d:04: 6f:c1:a3:a7:b0:71:b4:e7:b0:fe:9c:80:44:ad:60: 7e:9e:9f:14:d8:6c:43:02:40:01:18:25:be:f9:6d: 92:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D1:65:34:2A:D8:4E:CE:CA:0D:BF:1B:E9:D7:8E:1E:EB:D5:05:1F X509v3 Authority Key Identifier: keyid:57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d7:a0:f5:62:4e:e5:a8:79:89:e4:c2:9b:bc:e9:8f:97:a6: 11:6c:33:6f:8f:17:78:1d:d1:c2:e9:37:08:e4:9b:68:e6:b3: 8d:b5:43:c1:68:7c:50:21:ca:23:d7:d8:e4:09:fa:e9:6b:00: 07:7b:c7:9c:60:11:ec:64:63:d9:70:fa:91:eb:1b:a4:1f:ce: cf:5b:73:d7:90:64:e9:4a:7d:2b:e2:a8:da:f4:bd:75:b2:30: 54:17:3b:db:d1:fb:22:b5:3d:c0:a3:4c:a7:05:90:94:75:3e: 87:72:9c:f1:2d:b7:dc:68:ee:94:87:f6:46:00:6e:ad:46:bc: 7e:97:d9:f3:94:a9:31:69:5d:52:c5:34:b8:b1:e8:4f:76:a7: 12:eb:73:9b:15:b3:e4:6b:26:13:71:da:78:79:6f:20:8b:8d: 0b:3d:ba:9e:68:79:04:0b:ad:59:fd:d3:0e:de:ee:0d:76:2c: 53:fa:fb:8f:ab:a6:cc:38:28:f9:86:72:b1:d9:27:ac:18:16: 71:e6:12:01:30:0c:0e:87:2e:23:f6:29:16:a3:66:be:91:db: 0e:96:d5:46:7b:8d:7b:88:ca:bb:8a:73:63:a4:8a:4b:95:d7: 39:aa:5c:e1:3d:22:a1:68:ec:cc:c9:7e:6c:87:7b:df:52:cd: ab:70:dd:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EyOTcxMTAvBgNVBAUTKDU3REI0MkFCOUVCQkVGQkZFMjEwNzNGNTAwN0ZDMzc2 MkM1RkJCMDgwHhcNMjUwOTE4MjA0MDE0WhcNMjUwOTI1MjA0MDE0WjAYMRYwFAYD VQQDEw02OGNjNmUyZi01ODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZjcL4LLBuiY4U0DVGu+k9la+EWaJubeJV7a8WuECW7aIVYB4hZcsmVV9DFh tSeUbwsSjnlcMUjzUAUb5H7yxvPIOnMNVLZ8XZmkACd4W669rAMnbulmQGZ8JJHa 43u6NUmQVLIONr/1zOx3f60H0XUhem+yQzeWoN4ai8SZ0vBFTP9DnRxC1a+AYDml O+pM8Uv9aKEH/wD3XSvD28mEqIq9FY8DE9SDhDeqHYB02nt+01lU+2S6pF81KvZq zkd461fVx7MKhcLtCn5SIBVn5gwt7wvOxkIWc8Gmw8pHbQRvwaOnsHG057D+nIBE rWB+np8U2GxDAkABGCW++W2S6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfRZTQq 2E7Oyg2/G+nXjh7r1QUfMB8GA1UdIwQYMBaAFFfbQqueu++/4hBz9QB/w3YsX7sI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTI5Ny8yNEVEMjE1NkJD MjgxMUVBOTdGOTZENDFDNEY5QUUwMi9WOXRDcTU2Nzc3X2lFSFAxQUhfRGRpeGZ1 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y5dENxNTY3NzdfaUVIUDFBSF9EZGl4ZnV3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTI5Ny8yNEVEMjE1NkJDMjgxMUVBOTdGOTZENDFDNEY5QUUwMi9WOXRDcTU2Nzc3 X2lFSFAxQUhfRGRpeGZ1d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN16D1Yk7lqHmJ5MKbvOmPl6YRbDNvjxd4HdHC6TcI5Jto5rONtUPB aHxQIcoj19jkCfrpawAHe8ecYBHsZGPZcPqR6xukH87PW3PXkGTpSn0r4qja9L11 sjBUFzvb0fsitT3Ao0ynBZCUdT6HcpzxLbfcaO6Uh/ZGAG6tRrx+l9nzlKkxaV1S xTS4sehPdqcS63ObFbPkayYTcdp4eW8gi40LPbqeaHkEC61Z/dMO3u4NdixT+vuP q6bMOCj5hnKx2SesGBZx5hIBMAwOhy4j9ikWo2a+kdsOltVGe417iMq7inNjpIpL ldc5qlzhPSKhaOzMyX5sh3vfUs2rcN3v -----END CERTIFICATE-----Generated at Fri Sep 19 00:39:11 2025 by rpki-client